# @summary A short summary of the purpose of this class
#
# A description of what this class does
#
# @example
#   include csns::krb5
class csns::krb5 {
  class { 'mit_krb5':
    default_realm     => 'IHEPKRB5',
    dns_lookup_realm  => false,
    dns_lookup_kdc    => false,
    ticket_lifetime   => '720h',
    renew_lifetime    => '7d',
    forwardable       => true,
    allow_weak_crypto => true,
  }
  class { 'mit_krb5::logging':
    default      => 'FILE:/var/log/krb5libs.log',
    kdc          => 'FILE:/var/log/krb5kdc.log',
    admin_server => 'FILE:/var/log/kadmind.log'
  }
  mit_krb5::realm { 'IHEPKRB5':
    kdc          => ['krb5-01.ihep.ac.cn','krb5-02.ihep.ac.cn'],
    admin_server => 'krb5-01.ihep.ac.cn'
  }
  mit_krb5::domain_realm { 'IHEPKRB5':
    domains => ['.ihep.ac.cn', 'ihep.ac.cn']
  }
}
